Static task
static1
Behavioral task
behavioral1
Sample
d9e4c79c8987d913186b5c3de3e936a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9e4c79c8987d913186b5c3de3e936a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9e4c79c8987d913186b5c3de3e936a5_JaffaCakes118
-
Size
22KB
-
MD5
d9e4c79c8987d913186b5c3de3e936a5
-
SHA1
fa16a38d35139fb217113ed2cfecaae131ad85ab
-
SHA256
d225e6fc04a016d952dda7a06463a7882446da17dedd29f4b9a8a7ef8e4b5890
-
SHA512
9378e80a76d67fe420d0de1b38056b6a43c2af12293a30f92ca279ccab253e8bfd44039a1c040d72057caafc5c6c6996c010a577c1c627ebb6ff2cf2dfe0a0b3
-
SSDEEP
192:Z5//2igfhW5RdP1oynuAEqGEZS8/FIAcCH+ZkLdnicJ4A7gmXES3KXYe38z+Yuvm:Zppg5IL1ZuwBeOdnX4A7V3KXf3OK4J/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9e4c79c8987d913186b5c3de3e936a5_JaffaCakes118
Files
-
d9e4c79c8987d913186b5c3de3e936a5_JaffaCakes118.exe windows:4 windows x86 arch:x86
47b2bf93227e4025671552b172f5847f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
Sleep
SetEvent
OpenEventA
FreeResource
WriteFile
GlobalAlloc
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
GetTempPathA
GetTickCount
OpenThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateToolhelp32Snapshot
Thread32Next
Thread32First
Process32Next
Process32First
GetStartupInfoA
user32
wsprintfA
shell32
ShellExecuteA
msvcrt
_strcmpi
_stricmp
strcat
memset
_snprintf
strrchr
fopen
memcpy
strlen
strcpy
rand
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ